Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/1-hG2Dbs_La9AbTTHq3kZfe9Gl7w.roa
File: 1-hG2Dbs_La9AbTTHq3kZfe9Gl7w.roa (raw, json)
Hash identifier: 4o3QNBS//3lvkUWsgaSw+ESbi5PjtVTItmQqpM/97DQ=
Subject key identifier: FA:11:B6:0D:BB:3F:2D:AF:40:6D:34:C7:AB:79:19:7D:EF:46:97:BC
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018EF2787C5B2EAB48F4DC44FF0B60A754EF
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/1-hG2Dbs_La9AbTTHq3kZfe9Gl7w.roa
Signing time: Thu 18 Apr 2024 18:29:26 +0000
ROA not before: Thu 18 Apr 2024 18:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 146.19.128.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
217.119.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 16:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:78:7c:5b:2e:ab:48:f4:dc:44:ff:0b:60:a7:54:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Apr 18 18:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa11b60dbb3f2daf406d34c7ab79197def4697bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:e1:99:bd:11:a5:d8:b7:46:d8:5e:82:d0:
06:d2:97:d4:75:16:bc:c9:7e:d4:f9:04:14:c9:bb:
c7:d9:e3:3f:e4:0b:54:04:6f:7d:10:0e:f5:5b:a2:
f7:7f:d5:1f:44:f6:45:dc:bb:50:0c:7f:e1:e0:a5:
e8:2c:5f:36:54:29:6b:af:90:81:fc:64:0e:9f:79:
0b:96:d4:46:ba:36:db:21:f9:98:a1:39:8d:08:92:
86:18:9e:93:c2:1a:fb:f4:c0:da:e1:1b:f6:bd:ab:
c6:1d:c2:9f:0b:2c:b5:86:ec:c4:8e:93:a0:75:38:
7c:fa:e8:4c:6f:7b:6c:dc:df:a8:ad:93:fb:8c:bf:
bb:f9:74:0b:88:51:22:6f:51:4c:e3:62:29:27:ec:
3a:b3:2f:5f:1a:df:02:80:8e:1c:93:b5:42:98:2c:
63:9b:1c:f2:58:1e:6c:4f:f2:31:fe:7b:c2:1a:2e:
f8:0b:c3:86:6f:f4:11:7b:43:0d:47:b0:0d:6e:ae:
ea:26:e4:e9:de:4d:7e:7d:57:88:f2:dd:c4:46:f3:
af:03:c6:75:92:0c:59:85:3d:c4:76:71:08:3a:48:
af:17:65:ec:af:ae:2b:8f:c5:f8:a4:26:62:d1:d4:
3e:7b:89:eb:9c:5e:5b:d6:92:b6:8f:2c:54:3a:65:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:B6:0D:BB:3F:2D:AF:40:6D:34:C7:AB:79:19:7D:EF:46:97:BC
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/1-hG2Dbs_La9AbTTHq3kZfe9Gl7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
178.250.186.0/24
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fa:cc:98:6c:ab:25:96:d8:73:70:a7:c9:ce:3a:86:a5:50:
3e:6d:82:e9:61:65:c6:54:e8:f8:bd:7a:68:4e:3a:eb:de:b4:
dd:61:6d:fc:ee:c1:71:6a:5c:4a:7c:a8:1c:fb:47:ca:e8:2a:
79:c8:6a:e9:29:20:a2:5d:28:1d:25:5f:12:11:25:e9:84:96:
54:a6:f6:ad:2a:a1:23:93:fe:53:11:29:ef:c7:69:f3:8e:45:
45:25:9f:f3:64:9e:5e:4d:95:a9:ef:cb:bd:02:1a:4a:7a:3c:
97:de:2b:26:92:b8:62:2f:4e:9c:f9:34:2d:8c:07:a8:58:9e:
10:a7:2b:7b:ce:b1:fb:4b:20:c2:a4:77:0f:b8:a0:d8:7d:b9:
20:36:94:65:0b:0a:30:6f:9a:20:f9:91:7b:36:5c:2b:4b:ae:
e8:25:ca:5e:1f:4d:ce:58:fe:26:d8:33:97:a4:15:d3:b8:fa:
08:aa:fc:85:17:30:5e:c0:2e:50:7f:bd:3c:e2:f4:f4:37:10:
86:75:2c:7c:da:c2:43:96:af:13:63:54:15:31:38:79:b2:cb:
09:da:58:4f:e6:49:9e:73:63:f5:49:bb:57:b4:7c:04:ab:a2:
04:d2:9e:5f:99:ab:a7:50:45:91:5c:2b:bd:3c:c1:03:5b:7b:
8d:c8:06:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:06 2025 by rpki-client